Certificate Validation Flaw in Omni C20 Affects Cybersecurity Efforts
CVE-2026-93291

9.3CRITICAL

Key Information:

Vendor

Eufy

Status
Omni C20
Vendor
CVE Published:
24 September 2026

What is CVE-2026-93291?

The Omni C20 device is affected by a significant flaw in its certificate validation process. This vulnerability could enable attackers to execute man-in-the-middle attacks, allowing unauthorized access to communications between the device and users. If exploited, this issue may lead to arbitrary code execution on the affected system, emphasizing the critical need for timely updates and proper security measures.

Affected Version(s)

Omni C20 0 < 1.6.4

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jared of Somerset Recon reported these vulnerabilities to CISA.
.